---
id: "CVE-2026-123032"
kind: "vulnerability"
aliases: ["CVE-2026-123032"]
title: "Internet of Agents: WebSocket connection manager lets remote users skip authentication"
severity: "high"
cvss: 7.5
epss: null
exploited: false
status: "open"
category: "ai-tooling"
products: [{"name": "Internet of Agents (IoA)", "fixed": [], "affected": "all commits up to 9d78e88e47160eb42ee1ee8538c05e1c2c47877a (rolling release, no versions)", "ecosystem": "vendor"}]
ecosystems: []
tags: ["ai-agents", "ai-tooling", "internet-of-agents", "openbmb", "websocket"]
not_affected_if: ["im-server-not-exposed", "not-deployed", "private-network"]
published_at: "2026-11-05T15:17:20+00:00"
first_seen_at: "2026-11-05T15:39:21+00:00"
updated_at: "2026-11-05T15:42:25+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-123032", "first_seen_at": "2026-11-05T15:39:21+00:00"}, {"source": "analyst", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-123032", "first_seen_at": "2026-11-05T15:42:25+00:00", "cites": ["https://nvd.nist.gov/vuln/detail/CVE-2026-123032", "https://github.com/OpenBMB/IoA"]}]
exploit_sources: []
---

# Internet of Agents: WebSocket connection manager lets remote users skip authentication

OpenBMB Internet of Agents has a flaw in its WebSocket connection manager, where manipulating the agent_name argument bypasses authentication. A remote attacker can connect to the agent server without valid credentials, and a public exploit has been released.

_Summary, check and fix written by a model from the sources; labelled as such._

## Affected

- vendor:Internet of Agents (IoA) affected all commits up to 9d78e88e47160eb42ee1ee8538c05e1c2c47877a (rolling release, no versions) fixed no fixed version listed

## How to check

- Confirm whether you run OpenBMB Internet of Agents (OpenBMB/IoA, ioa-server image or source) and which commit it is built from; commits up to 9d78e88e47160eb42ee1ee8538c05e1c2c47877a are listed as affected.
- Check whether the im_server WebSocket service (ConnectionManager.connect in im_server/app.py) is reachable from outside your network.
- Workaround (not from the vendor): keep the IoA server on a private network or behind an authenticating proxy/firewall until the project responds.

## Timeline

- 2026-11-05T15:39:21+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-123032
- 2026-11-05T15:42:25+00:00 analyst https://nvd.nist.gov/vuln/detail/CVE-2026-123032 — NVD (CNA VulDB) text only; no project advisory, fix or issue text found. NVD says the project was told via an issue and has not responded; repo has no SECURITY.md. Public exploit claimed by NVD but no link found. X not checked. Not verified: no vendor page.

## Documents

- [advisory] NVD CVE-2026-123032 https://nvd.nist.gov/vuln/detail/CVE-2026-123032
- [describes] OpenBMB/IoA repository https://github.com/OpenBMB/IoA

## From the sources

A security flaw has been discovered in OpenBMB Internet of Agents up to 9d78e88e47160eb42ee1ee8538c05e1c2c47877a. This affects the function ConnectionManager.connect of the file im_server/app.py of the component WebSocket Connection Manager. The manipulation of the argument agent_name results in missing authentication. It is possible to launch the attack remotely. The exploit has been released to the public and may be used for attacks. This product takes the approach of rolling releases to provide continious delivery. Therefore, version details for affected and updated releases are not available. The project was informed of the problem early through an issue report but has not responded yet.

---

_Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai_